Android 17 Root Exploit Chains Firefox Bug with 15-Year Kernel Vulnerability (By pressing a Link)
… According to Nebula Security, the attack begins with a vulnerability in Firefox for Android affecting versions up to 151.0.3. …
Search
Microsoft August Patch Tuesday Fixes 421 Flaws Including Exploited Windows Zero-Day
… Published critical-vulnerability totals also vary, with reports ranging from 42 to 62. The broader Microsoft Security Update Guide count nevertheless shows that August is another unusually large patching month. …
Microsoft Faces New BitLocker Security Concerns With YellowKey
… Alongside YellowKey, Chaotic Eclipse also published information on a second vulnerability named GreenPlasma. …
Microsoft Ships Record July Patch Tuesday with 570 Security Fixes and Three Zero-Days
… The company has stated that AI is expected to play an even larger role in future security development. The cumulative update also includes several Windows 11 improvements outside security. …
Ubiquiti Urges Immediate Updates Following Root Access Exploit Discovery
… Vulnerability Description CVE-2026-34908 Authentication bypass component of exploit chain CVE-2026-34909 URL parsing and validation inconsistency exploitation CVE-2026-34910 Command injection leading to privilege escalation Affected Version UniFi OS Server 5.0.6 Patched Version UniFi OS Server 5.0.…
Critical 7-Zip Vulnerability Fixed in Version 26.02 found
… Like many client-side attacks, exploitation still requires some degree of user interaction, making phishing emails and malicious downloads likely delivery mechanisms. The newly disclosed vulnerability follows another series of security issues addressed by version 26.01 earlier this year. …
Critical Tenda Router Backdoor Leaves Multiple Models Vulnerable to Admin Access
… Until Tenda releases a security patch, users of affected devices should assume the vulnerability remains exploitable and take appropriate precautions to limit exposure. …
AMD Publishes Fixes for Two High-Severity TPM Vulnerabilities
… CVE-2026-6726 is an out-of-bounds-read vulnerability with a CVSS severity score of 8.5. AMD says exploitation could expose certification-authority credentials, potentially allowing an attacker to forge TPM keys or attestation data. …
ASUS Armoury Crate Driver Vulnerability Receives High-Severity Security Fix
… The vulnerability is tracked as CVE-2026-8917 and has a reported CVSS score of 8.4. It involves an IOCTL interface capable of writing attacker-controlled values to sensitive memory locations. Successful exploitation requires local access and the ability to execute code. …
GeForce NOW Exploit Reportedly Opens Full Windows Desktop on Cloud Gaming Servers
… A Windows desktop escape and a cross-tenant security breach are not the same severity. …